CVE-2012-0411
published 2012-12-24CVE-2012-0411: Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action.
PriorityP355critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
4.32%
90.2th percentile
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| novell | iprint | <= 5.78 | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
| novell | iprint | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7cm2-g3r8-rf95: Unspecified vulnerability in Novell iPrint Client before 5
ghsa_unreviewed·2022-05-04
CVE-2012-0411 [HIGH] GHSA-7cm2-g3r8-rf95: Unspecified vulnerability in Novell iPrint Client before 5
Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action.
Red Hat
(nnrpd): Prone to STARTTLS plaintext command injection
vendor_redhat·2012-06-15·CVSS 6.8
CVE-2012-3523 [MEDIUM] (nnrpd): Prone to STARTTLS plaintext command injection
(nnrpd): Prone to STARTTLS plaintext command injection
The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Statement: Not vulnerable. This issue did not affect the versions of inn as shipped with Red Hat Enterprise Linux 5 as they did not include support for the STARTTLS command.
Package: inn (Red Hat Enterprise Linux 5) - Not affected
No detection rules found.
No public exploits indexed.
2012-12-24
Published